I have installed cento 5.3. I enabled the ssh deamon. I have found that 2 options that I normally use does respond as I expect. Has anyone else had similar problems with the following options in sshd_config:
- Port 6666 - if I set the port to anything other than 22 (default), using ssh -p6666 name@servername, does not work. Yet if I leave keep the default, then ssh name@servername allows me to login.
- PasswordAuthentication no - if I set this option to "no" (default is "yes"), and my ssh key is either missing or in error, I will be prompted for user system login password. If this is set to "no", it should not allow me to login if I have not ssh key specified or in error. Has anyone else run into this problem.
Is there a workaround? What are my options? Please help.
Hi,
On Tue, 2009-09-22 at 11:01 -0700, Karl Kobata wrote:
I have installed cento 5.3. I enabled the ssh deamon. I have found that 2 options that I normally use does respond as I expect. Has anyone else had similar problems with the following options in sshd_config:
- Port 6666 – if I set the port to anything other than 22 (default),
using ssh –p6666 name@servername, does not work. Yet if I leave keep the default, then ssh name@servername allows me to login.
Did you check your iptables rules ? port 6666 is closed by default. I use a sshd with port 443, so it should work.
- PasswordAuthentication no – if I set this option to “no” (default is
“yes”), and my ssh key is either missing or in error, I will be prompted for user system login password. If this is set to “no”, it should not allow me to login if I have not ssh key specified or in error. Has anyone else run into this problem.
Erhm.. I remember it does ask for a password but just doesn't let you in. But I can me mistaken :)
Regards,
Michel
On Tue, Sep 22, 2009 at 1:01 PM, Karl Kobata Karl.Kobata@syncira.com wrote:
- Port 6666 – if I set the port to anything other than 22 (default), using
ssh –p6666 name@servername, does not work. Yet if I leave keep the default, then ssh name@servername allows me to login.
You need to change the port in iptables as well.
Hi,
On Tue, Sep 22, 2009 at 14:01, Karl Kobata Karl.Kobata@syncira.com wrote:
- PasswordAuthentication no – if I set this option to “no” (default is
“yes”), and my ssh key is either missing or in error, I will be prompted for user system login password. If this is set to “no”, it should not allow me to login if I have not ssh key specified or in error. Has anyone else run into this problem.
This is related to PAM authentication, which is what is used in (most) Linux systems. To prevent sshd from authenticating with passwords I believe you have to set "ChallengeResponseAuthentication no" instead, at least that is what I gather from reading the comments in /etc/ssh/sshd_config.
HTH, Filipe